feat: portal auth login and password reset

backend/docs/swagger.yaml

@@ -657,6 +657,54 @@ definitions:
       name:
         type: string
     type: object
+  dto.PasswordResetForm:
+    properties:
+      confirmPassword:
+        description: ConfirmPassword 确认新密码；必须与 Password 一致。
+        type: string
+      password:
+        description: Password 新密码（明文）。
+        type: string
+      resetToken:
+        description: ResetToken 重置令牌；由验证码校验接口返回。
+        type: string
+    type: object
+  dto.PasswordResetResponse:
+    properties:
+      ok:
+        description: Ok 是否成功。
+        type: boolean
+    type: object
+  dto.PasswordResetSendSMSForm:
+    properties:
+      phone:
+        description: Phone 手机号；当前版本将其作为用户名使用（users.username）。
+        type: string
+    type: object
+  dto.PasswordResetSendSMSResponse:
+    properties:
+      code:
+        description: Code 验证码（预留：当前用于前端弹窗展示；正式接入短信后应移除/仅在开发环境返回）。
+        type: string
+      nextSendSeconds:
+        description: NextSendSeconds 下次可发送剩余秒数（用于前端 60s 倒计时）。
+        type: integer
+    type: object
+  dto.PasswordResetVerifyForm:
+    properties:
+      code:
+        description: Code 短信验证码。
+        type: string
+      phone:
+        description: Phone 手机号。
+        type: string
+    type: object
+  dto.PasswordResetVerifyResponse:
+    properties:
+      resetToken:
+        description: ResetToken 重置令牌；验证码校验通过后，用该令牌提交新密码。
+        type: string
+    type: object
   dto.PurchaseContentForm:
     properties:
       idempotency_key:
@@ -4223,6 +4271,69 @@ paths:
       summary: 用户登录
       tags:
       - Web
+  /v1/auth/password/reset:
+    post:
+      consumes:
+      - application/json
+      parameters:
+      - description: form
+        in: body
+        name: form
+        required: true
+        schema:
+          $ref: '#/definitions/dto.PasswordResetForm'
+      produces:
+      - application/json
+      responses:
+        "200":
+          description: 成功
+          schema:
+            $ref: '#/definitions/dto.PasswordResetResponse'
+      summary: 找回密码-重置密码
+      tags:
+      - Web
+  /v1/auth/password/reset/sms:
+    post:
+      consumes:
+      - application/json
+      parameters:
+      - description: form
+        in: body
+        name: form
+        required: true
+        schema:
+          $ref: '#/definitions/dto.PasswordResetSendSMSForm'
+      produces:
+      - application/json
+      responses:
+        "200":
+          description: 成功
+          schema:
+            $ref: '#/definitions/dto.PasswordResetSendSMSResponse'
+      summary: 找回密码-发送短信验证码
+      tags:
+      - Web
+  /v1/auth/password/reset/verify:
+    post:
+      consumes:
+      - application/json
+      parameters:
+      - description: form
+        in: body
+        name: form
+        required: true
+        schema:
+          $ref: '#/definitions/dto.PasswordResetVerifyForm'
+      produces:
+      - application/json
+      responses:
+        "200":
+          description: 成功
+          schema:
+            $ref: '#/definitions/dto.PasswordResetVerifyResponse'
+      summary: 找回密码-校验验证码
+      tags:
+      - Web
   /v1/auth/register:
     post:
       consumes: